Vulnerabilities > SAP > Netweaver Application Server Abap > 790

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2023-23853 Open Redirect vulnerability in SAP Netweaver Application Server Abap
An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, can craft a link which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack.
network
low complexity
sap CWE-601
6.1
2023-02-14 CVE-2023-23859 Cross-site Scripting vulnerability in SAP Netweaver Application Server Abap
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information.
network
low complexity
sap CWE-79
6.1
2023-02-14 CVE-2023-23860 Open Redirect vulnerability in SAP Netweaver Application Server Abap
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a link, which when clicked by an unsuspecting user can be used to redirect a user to a malicious site which could read or modify some sensitive information or expose the victim to a phishing attack.
network
low complexity
sap CWE-601
6.1